How to implement Samba authorization through PBIS?

V

vitaliy_saveliev2014-03-26 19:02:19

Active Directory

vitaliy_saveliev, 2014-03-26 19:02:19

Initial data:
Debian7
samba 3.6.6
pbis 7.1.1203
AD: Windows Server 2008 r2
Installed PBIS by: habrahabr.ru/post/174497
Everything went smoothly, rights separation works, balls are available.
Configured:
/opt/pbis/bin/config AssumeDefaultDomain true
/opt/pbis/bin/config UserDomainPrefix "MYDOMAIN"
smb.conf

[global]
        security = ADS
        workgroup = MYDOMAIN
        realm = MYDOMAIN.LOCAL
        server string = File Server %h

        machine password timeout = 0
        map to guest = Bad User
        guest account = nobody

Problem: authorization still passes only when the domain is specified in the login.
The scheme of work without entering a domain name is needed to connect from machines that are not entered into the domain, but have similar accounts to the domain, the test was on WinXP Sp3 & Win7 SP1 HE

Reply

Answer the question

In order to leave comments, you need to log in

1 answer(s)

C

Chromium58, 2014-03-26
@vitaliy_saveliev

Add to the [global] section in smb.conf
map untrusted to domain = Yes